<?php

// auth if possible
if ( file_exists('./includes/common.php') )
{
  require('includes/common.php');
  if ( !$session->user_logged_in )
  {
    // error out
    $paths->main_page();
    die('Not authorized');
  }
  $db->close();
  // unload Enano, we don't need it anymore
  unset($db, $session, $paths, $template, $plugins);
}

function parse_wildcard($str)
{
  $append = isset($_POST['match_whole']) ? '' : '%';
  return $append . mysql_real_escape_string(strtr(str_replace(array('%', '_'), array('\%', '\_'), $str), '*?', '%_')) . $append;
}

function basenick($nick)
{
  if ( preg_match('/^`/', $nick) )
  {
    $nick = substr($nick, 1);
  }
  return preg_replace('/(`|\|)(.+?)$/', '', $nick);
}

function dbdie()
{
  die('MySQL query error: ' . mysql_error());
}

function tableize_mysql_result($result)
{
  $col_strings = array(
      'nick' => 'Nickname',
      'basenick' => 'Basenick',
      'ip' => 'IP',
      'hostname' => 'Hostname',
      'time' => 'Last join',
      'channel' => 'Channel'
    );
  if ( mysql_num_rows($result) < 1 )
  {
    echo '<p>No results.</p>';
    return true;
  }
  $row = @mysql_fetch_assoc($result);
  echo '<table border="1" cellpadding="3"><tr>';
  foreach ( $row as $col => $_ )
  {
    echo "<th>{$col_strings[$col]}</th>";
  }
  echo '</tr>';
  do
  {
    echo "<tr>";
    foreach ( $row as $col => $val )
    {
      if ( $col == 'nick' )
        echo "<td><a href=\"iplogs.php?query_user=" . urlencode($val) . "\">$val</a></td>";
      else if ( $col == 'ip' )
        echo "<td><a href=\"iplogs.php?query_ip=" . urlencode($val) . "\">$val</a></td>";
      else if ( $col == 'time' )
        echo "<td>" . date('r', intval($val)) . "</td>";
      else
        echo "<td>$val</td>";
    }
    echo "</tr>";
  }
  while ( $row = mysql_fetch_assoc($result) );
  echo '</table>';
  return true;
}

require('../../stats-fe.php');
require('../../timezone.php');

echo '<h2>' . $nick . ' IP logs</h2>';

if ( isset($_POST['submit']) )
{
  $query = 'SELECT nick, basenick, ip, hostname, channel, time FROM ip_log';
  $where = 'WHERE';
  if ( !empty($_POST['nick']) )
  {
    $query .= " $where ( nick LIKE '" . parse_wildcard($_POST['nick']) . "'";
    $query .= " OR basenick LIKE '" . parse_wildcard($_POST['nick']) . "' )";
    $where = 'OR';
  }
  if ( !empty($_POST['ip']) )
  {
    $query .= " $where ip LIKE '" . parse_wildcard($_POST['ip']) . "'";
    $where = 'OR';
  }
  if ( !empty($_POST['host']) )
  {
    $query .= " $where hostname LIKE '" . parse_wildcard($_POST['host']) . "'";
    $where = 'OR';
  }
  if ( !empty($_POST['channel']) && $_POST['channel'] != '#' )
  {
    $query .= " $where channel LIKE '" . parse_wildcard($_POST['channel']) . "'";
    $where = 'OR';
  }
  
  $query .= ';';
  
  if ( $result = eb_mysql_query($query) )
  {
    $num_results = mysql_num_rows($result);
    $str = ( $num_results == 1 ) ? "1 result" : "$num_results results";
    tableize_mysql_result($result);
  }
}

if ( isset($_GET['query_user']) )
{
  $nick =& $_GET['query_user'];
  echo '<h3>' . htmlspecialchars($nick) . '</h3>';
  echo '<p>Basenick: ' . htmlspecialchars(basenick($nick)) . '</p>';
  
  echo '<h4>IP addresses this user has been seen from</h4>';
  $nick = mysql_real_escape_string($nick);
  $basenick = mysql_real_escape_string(basenick($nick));
  $q = eb_mysql_query("SELECT DISTINCT ip, hostname FROM ip_log WHERE nick = '$nick' OR basenick = '$basenick';");
  if ( !$q )
    dbdie();
  tableize_mysql_result($q);
  
  echo '<h4>Channels this user has been seen in</h4>';
  $q = eb_mysql_query("SELECT DISTINCT nick, channel, time FROM ip_log WHERE nick = '$nick' OR basenick = '$basenick';");
  if ( !$q )
    dbdie();
  tableize_mysql_result($q);
}

if ( isset($_GET['query_ip']) )
{
  $ip =& $_GET['query_ip'];
  echo '<h3>' . htmlspecialchars($ip) . '</h3>';
  $ip = mysql_real_escape_string($ip);
  
  echo '<h4>Users seen from this IP address</h4>';
  $q = eb_mysql_query("SELECT DISTINCT nick, channel, time FROM ip_log WHERE ip = '$ip';");
  if ( !$q )
    dbdie();
  tableize_mysql_result($q);
}

// FORM
?>
<form action="iplogs.php" method="post">
  <h3>Search database</h3>
  <p><small>Enter data in one or more fields. You can use an asterisk (*) anywhere to match multiple characters or a question mark (?) to match a single character.</small></p>
  <table border="0">
    <tr>
      <td>Nickname</td>
      <td><input type="text" name="nick" size="30" /></td>
    </tr>
    <tr>
      <td>IP address</td>
      <td><input type="text" name="ip" size="30" /></td>
    </tr>
    <tr>
      <td>Hostname</td>
      <td><input type="text" name="host" size="30" /></td>
    </tr>
    <tr>
      <td>Channel</td>
      <td><input type="host" name="channel" size="30" value="#" /></td>
    </tr>
    <tr>
      <td colspan="2">
        <label><input type="checkbox" name="match_whole" /> Exact matches</label>
      </td>
    </tr>
    <tr>
      <td colspan="2" style="text-align: center;">
        <input type="submit" name="submit" />
      </td>
    </tr>
  </table>
</form>